The aesthetics industry in England has operated in a regulatory grey zone for years. Dermal fillers, chemical peels, and laser treatments could be performed by almost anyone, in almost any setting, with no mandatory registration and no routine inspections. That changed with the Health and Care Act 2022, which brought non-surgical cosmetic procedures under the remit of the Care Quality Commission.
From October 2025, any person or business in England carrying out specified non-surgical cosmetic procedures must be registered with the CQC. Operating without registration is a criminal offence. And unlike the previous voluntary licensing schemes run by local authorities, CQC registration carries the full weight of statutory inspection, enforcement notices, and prosecution.
The regulations cover a defined list of non-surgical cosmetic procedures. If your clinic performs any of the following, you must be registered with the CQC as a service provider:
Superficial treatments that do not penetrate beyond the epidermis are generally excluded. Standard facials, superficial chemical peels (glycolic, lactic acid at low concentrations), and LED light therapy do not currently trigger registration. But the boundary is defined by clinical effect, not by marketing claims. If a treatment penetrates the dermis or introduces a substance beneath the skin, it almost certainly falls within scope.
CQC inspections of aesthetic clinics follow the same framework used for other health and social care providers. Inspections assess five key questions: is the service safe, effective, caring, responsive, and well-led? But the practical focus for aesthetic clinics centres on several specific areas.
CQC expects a documented clinical governance framework. That means written policies and procedures covering patient assessment, treatment protocols, prescriber oversight, complication management, infection prevention, and clinical record keeping. These are not optional guidelines. They are regulatory expectations that inspectors will check against.
For many aesthetic clinics, particularly those that have operated as beauty businesses rather than clinical services, this represents a significant step change. A treatment menu and a consent form are not a clinical governance framework.
CQC will examine how consent is obtained, documented, and evidenced. The expectation is that consent is informed, specific to the procedure, given freely, and documented in writing. For cosmetic procedures, there are additional requirements around cooling-off periods. DHSC guidance recommends a minimum of two weeks between the initial consultation and treatment for injectable procedures.
Consent records must demonstrate that the patient was informed of the specific risks of the procedure, the expected outcomes, alternative treatments, and the qualifications of the person performing the treatment. A single-page generic consent form signed on the day of treatment will not satisfy these requirements.
Botulinum toxin is a prescription-only medicine. It can only be administered under the authority of a prescriber (doctor, dentist, nurse prescriber, or pharmacist prescriber). CQC will check that a clear prescribing governance trail exists. This means either a Patient Group Direction (PGD) that has been properly authorised and signed, or individual patient-specific directions from a named prescriber who has assessed the patient.
If your clinic uses a remote prescriber who signs off on treatments without seeing the patient, CQC will scrutinise the arrangement. The prescriber must have sufficient information to make a clinical judgement, and the governance trail must demonstrate that this happened for every patient.
Every clinic must have a documented complications management policy. This must cover immediate management of adverse reactions (including anaphylaxis), management of delayed complications (including vascular occlusion protocols for filler procedures), referral pathways to secondary care, and a duty of candour policy for when things go wrong.
CQC will want to see that staff are trained in complication recognition and management, that emergency equipment is available and maintained, and that complication records are kept and reviewed for learning.
Regulations 9 to 20 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 set out the fundamental standards that all CQC-registered providers must meet. For aesthetic clinics, the most directly relevant are:
Failure to meet these standards can result in requirement notices, warning notices, conditions on registration, suspension, or cancellation of registration. CQC has the power to prosecute for the most serious breaches.
Record keeping is where many aesthetic clinics will find the compliance burden most acute. CQC expects comprehensive, contemporaneous clinical records for every patient encounter. At minimum, this means:
These records must be stored in compliance with GDPR and retained for the periods specified in the Records Management Code of Practice for Health and Social Care. For adult patients, that is a minimum of eight years after the last treatment.
CQC registration does not remove the need for appropriate insurance, and in practice the two reinforce each other. All practitioners performing regulated procedures must hold professional indemnity insurance that specifically covers the procedures they perform. General beauty therapy insurance will not cover injectable treatments or laser procedures.
Public liability insurance is also essential for the premises. If your clinic operates from rented space, confirm that your lease permits CQC-regulated activities and that the landlord's insurance is compatible with your clinical use.
Carrying out a regulated activity without CQC registration is a criminal offence under section 10 of the Health and Social Care Act 2008. The maximum penalty is an unlimited fine, imprisonment, or both. CQC has stated publicly that it will take enforcement action against unregistered providers, and it has the power to issue urgent notices requiring cessation of activities.
Beyond criminal liability, operating without registration exposes practitioners to professional sanctions from their regulatory body (GMC, NMC, GPhC, or GDC), insurance policy voidance, and civil litigation risk if a patient suffers harm from an unregistered provider.
The registration process requires a nominated individual (the registered manager), a statement of purpose describing the regulated activities to be carried out, evidence of clinical governance systems, staff qualification records, DBS checks, and proof of insurance. The CQC assessment includes fitness interviews for the registered manager and any partners or directors.
Most clinics should allow 3 to 6 months for the full registration process, including the time needed to develop governance documentation, train staff, and assemble the application. Waiting until the last minute is not a viable strategy. CQC has been clear that it will not fast-track applications for providers who left it too late.
Treatment records, consent management, prescriber governance, complications logging, training matrices, and inspection preparation. Purpose-built for aesthetic clinics navigating CQC registration.
Learn more about ClinicPadCompliance tools for regulated industries. Built with the tools of tomorrow, guided by the values of yesterday.